Malicious code in isolated-silver-ape (npm)

Source: amazon-inspector c1bf3579bf50d1c12a6fa36e149c314108aba643f652b64a8de0ac59cf18e589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in inc-turquoise-ape (npm)

Source: amazon-inspector af907267455f9fcbbcb270b63e8144b808f98c148adbcc29c881673fcb807f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in given-amaranth-ape (npm)

Source: amazon-inspector 07c2d5761d03950ea05f7c85692de994e4d003d1fd15816f8f63ef94e134c26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in envious-lime-ape (npm)

Source: amazon-inspector a38fec78d3735b58ee0cf18e6bda2a2188bbdfb9c911ae3ad3d4782e365220a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in embarrassed-plum-ape (npm)

Source: amazon-inspector 4eb020e40af0d4d4d98a23ac0f24edf4120b4a47b4ec8e83e4b443e6df0eb15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in confidential-olive-ape (npm)

Source: amazon-inspector 9281542f8009b505d9d5b7fd5f3a0819908f11d3d2696f0b649ce0035df09849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in coming-turquoise-ape (npm)

Source: amazon-inspector 37de3792cdc24173b7d3529c6f3e5c040f215c6e2904cdc9b676089e08b9d82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in beautiful-aqua-ape (npm)

Source: amazon-inspector 0a424d41f787c05f8cbb4e298c07d7471bf5a992e1327393bee861e2529354ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ape-staking-public (npm)

The package ape-staking-public was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ape-portal-public (npm)

The package ape-portal-public was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-ape (npm)

The package @zalastax/nolb-ape was found to contain malicious code. --- Credit: OpenSSF source...

agentopia (>=0.1.0, <=0.1.5), alaya-py (>=0.15.0.0, <=0.15.0.1) +218 more potentially affected by CVE-2022-37454 via pysha3 (>=1.0.0b1, <=1.0.2)

pysha3 PYPI version =1.0.0b1, =0.1.0, =0.15.0.0, =0.4.0a1, =0.1.0b1, =0.1.22, =0.4.0, =0.4.0a0, =0.1.0a0, =0.4.0a1, =0.1.0a2, =0.4.0, =0.4.0, =0.4.0, =0.5.2 - ape-frame 0.5.0a0 and more Source cves: CVE-2022-37454 Source advisory: OSV:PYSEC-2026-504...

CVE-2021-0619

In ape extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561395; Issue ID: ALPS05561395...

Fedora 43 : dr_libs (2025-894ea1b6a5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-894ea1b6a5 advisory. drflac v0.13.2 - 2025-12-02 - Improve robustness of the parsing of picture metadata to improve support for memory constrained embedded devices. - Fix a warni...

EUVD-2025-117286

Malicious code in isolated-silver-ape npm...

EUVD-2025-117222

Malicious code in moral-beige-ape npm...

EUVD-2025-103923

Malicious code in majorapez3n npm...

EUVD-2025-94918

Malicious code in stingyapez3n npm...

EUVD-2025-95454

Malicious code in remarkableapez3n npm...

Malicious code in chief_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6a5d5c0a890d9dc6cede31b4951981c4d31f1883b4604d71a2361733ebae07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...